CMT216 Computer & Network Forensics – 2023/2024 Summary Taurus Smith and her accomplice may be involved in illegal activity. The suspect’s address was searched by the local police officers. In Taurus Smith’s house, one mobile phone, clothing, some cooking books, toiletries, and a USB flash drive were found. In a further investigation of Taurus Smith’s mobile phone (Exhibit A) and USB flash drive, it is found that the mobile phone is liquid damaged, and the USB flash drive includes an image of a laptop hard drive. Taurus Smith refused to answer any questions. You are a forensic investigator and will be given the image of USB flash drive. You need to conduct examination and identify the relationship between Taurus and her accomplice and any other supporting evidence that pertains to the case. Detailed Scenario Lard&land Dounuts, is a doughnut making company in Springfield, believe that one of their employees, Ms Taurus Smith, is really a secret agent working for their competitor Diggity Dounghnuts. Taurus Smith has accessed to the company’s prize asset, the secret recipe for ‘Honey Duff Donuts’. Security staff are worried that Taurus has leaked the company’s secret recipe. The security staff have been monitoring Taurus’s activity for some time but haven’t found anything suspicious until now. Today an unexpected laptop briefly appeared on the company wireless network. Security staff hypothesize that it may be someone in the carpark because no strangers were seen in the company. Taurus’s computer (192.168.1.158) sent Instant message packets over the wireless network to the laptop. From the analysis of the packets, Exhibit B, Exhibit C, Exhibit D, and Exhibit E (Exhibit B and Exhibit C are presented in the pdf file) attached below, the company believe they have been victim of a computer misuse attack and that the suspect is planning to leave shortly. They therefore decide to call in the local police. Subsequent investigations into Ms Taurus Smith indicate that the name is an alias and that she is Mrs Mona Simpson and is a wanted woman and that her last known address was with her son Mr H.J. Simpson at 742 Evergreen Terrace. During the police search of 742 Evergreen Terrace, they found a USB stick and a liquid damaged mobile phone (Exhibit A). These items were removed from forensics forensic analysis. You as a forensic analyst have been provided with an image from the USB flash drive. Your task is to perform a forensic analysis of the image. Looking at the phone it does not appear that it will yield any information.